Apache Traffic Server input validation error vulnerability

A input validation error vulnerability exists in Apache Traffic Server versions 8.0.0 through 8.1.11, 9.0.0 through 9.2.15, 10.0.0 through 10.1.4, and 10.2.0. This vulnerability arises when a client sends a POST request containing Expect: 100-continue, and the source server responds before readin...

Pillow resource management error vulnerability

Versions of Pillow from 5.1.0 up to but not including 13.0.0 contain a resource management error vulnerability. This vulnerability arises because PdfParser.linearizepagetree in src/PIL/PdfParser.py fails to track repeated indirect references. When processing malicious PDFs that reference the same...

Apache Traffic Server resource management error vulnerability

Versions 8.1.11, 9.2.5 through 9.2.15, 10.0.0 through 10.1.4, and 10.2.0 of Apache Traffic Server contain a resource management error vulnerability. This vulnerability arises when proxy.config.http.dropchunkedtrailers is enabled; the service then waits for the dropped trailing bytes, causing...

Cisco Emergency Responder: Input validation error vulnerability

Cisco Emergency Responder versions 14, 14SU1, 14SU2, 14SU3, 14SU3a, 15, 15SU1, 15SU1a, 14SU4, 15SU2, 15SU3, 14SU5, 15SU4, and 14SU6 have a vulnerability related to input validation errors. This vulnerability arises from improper input validation, which may allow attackers to exploit custom inputs...

Michelle Tilley TOML Parser for Node.js resource management error vulnerability

Versions prior to 5.0.1 of the Michelle Tilley TOML Parser for Node.js contain a resource management error vulnerability. This vulnerability arises because toml.parse passes unbounded sequences of hexadecimal, octal, binary, and decimal digits from lib/parser.js to BigInt before performing checks...

Cisco Open Source Snort3 buffer error vulnerability

Cisco Open Source Snort3 contains a buffer error vulnerability. This vulnerability stems from the lack of error checking in the Snort 3 SMTP MIME Decoder when parsing the SMTP header’s MIME field. As a result, unauthenticated remote attackers can send specially crafted SMTP packets over an...

Apache bRPC resource management error vulnerability

Versions of Apache bRPC prior to 1.18.0 contain a resource management error vulnerability. This vulnerability stems from heap reuse after heap deallocation in the RTMP protocol component. Remote attackers can send specially crafted Abort control messages without authentication, causing the bRPC...

Cisco Emergency Responder: Input validation error vulnerability

Cisco Emergency Responder has a vulnerability related to input validation errors. This vulnerability stems from improper control of resource lifecycle, which may lead to injection attacks...

Splunk Enterprise input validation error vulnerability

Versions prior to Splunk Enterprise 10.4.4 10.4.x, prior to version 10.2.8 10.2.x, prior to version 10.0.11 10.0.x, and prior to version 9.4.16 9.4.x contain an input validation error vulnerability. This vulnerability stems from improper handling of input data...

Apache Traffic Server has a vulnerability related to input validation errors.

The Apache Traffic Server versions 8.0.0 to 8.1.11, 9.0.0 to 9.2.15, 10.0.0 to 10.1.4, and 10.2.0 have a input validation error vulnerability. This vulnerability arises from the forwarding of302 responses that should be treated as resolution errors. Additionally, the Transfer-Encoding: chunked...

Cisco TelePresence Video Communication Server Expressway buffer error vulnerability

The Cisco TelePresence Video Communication Server Expressway has a buffer error vulnerability stemming from an out-of-bounds write issue...

Coraza - Web Application Firewall: Input validation error vulnerability

Coraza – Web Application Firewall versions 3.0.0 to 3.8.1 had a vulnerability related to input validation errors. This vulnerability arose when the JSON flattened nested properties into dot-separated ARGSPOST names without escaping the literal dots. This led to conflicts between different...

Electron buffer error vulnerability

Versions of Electron prior to 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9 contain a buffer error vulnerability. This vulnerability arises from the main process failing to properly verify the webContents.beginFrameSubscription frame data received from the GPU process. An attacker who gains code...

gitpython-developers GitPython processing logic error vulnerability

GitPython developers: Versions prior to 3.2.1 contain a logic error vulnerability. This vulnerability arises because createsubmodule accepts submodule paths influenced by attackers—such as .git/hooks—and calls clonerepo before performing a secure target rejection. This could allow the insertion o...

Pillow resource management error vulnerability

Versions 9.1.0 through 13.0.0 of Pillow contain a resource management error vulnerability. This arises because BmpRleDecoder.decode in src/PIL/BmpImagePlugin.py fails to set upper limits on each branch. When operating in RLE BMP delta conversion and absolute modes, data can be appended beyond the...

vLLM processing logic error vulnerability

Versions of vLLM prior to 0.31.0 contain a logic error vulnerability. This vulnerability stems from a cross-request mask leakage in InputBatch.condense, where an outdated line of allowedtokenids remains. Attackers can submit concurrent requests via unauthenticated /invocations, causing the recycl...

VyperLang Vyper Processing Logic Vulnerability

VyperLang Vyper 0.1.0b10 to 0.2.3 versions have a processing logic error. This bug stems from incorrect code generated by return statements within for loops in internal functions that call other functions at least two levels deep. This results in invalid jump targets stack underflow, causing...

Splunk Enterprise input validation error vulnerability

A input validation error vulnerability exists in Splunk Enterprise versions prior to 10.4.4, 10.2.8, 10.0.11, and 9.4.16; as well as in Splunk Secure Gateway versions prior to 3.10.12, 3.9.26, and 3.8.73. This vulnerability arises because Splunk Secure Gateway fails to neutralize special characte...

FreeRDP resource management error vulnerability

FreeRDP version 3.32.0 contains a resource management error vulnerability. This vulnerability arises because the drdynvc channel uses an owned-stream reclaimer to release pools of streams when totalLength is less than the block size, resulting in post-release reuse. A malicious RDP server can sen...

Apache bRPC resource management error vulnerability

Versions of Apache bRPC prior to 1.18.0 contain a resource management error vulnerability. This vulnerability arises because multiple parsers fail to enforce limits on the size and decompression output declared by clients, potentially leading to disproportionate memory usage and process crashes...